Refer to the exhibit.

Which value must be configured in the User Group field when the Cisco AnyConnect Profile is created to connect to an ASA headend with IPsec as the primary protocol?

• A.address-pool
• B.group-alias
• C.group-policy
• D.tunnel-group

Comment: *

Name: *

Email: *

Verification: *

In a FlexVPN deployment, the spokes successfully connect to the hub, but spoke-to-spoke tunnels do not form. Which troubleshooting step solves the issue?

• A.Verify the spoke configuration to check if the NHRP redirect is enabled.
• B.Verify that the spoke receives redirect messages and sends resolution requests.
• C.Verify the hub configuration to check if the NHRP shortcut is enabled.
• D.Verify that the tunnel interface is contained within a VRF.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

The IKEv2 site-to-site VPN tunnel between two routers is down. Based on the debug output, which type of mismatch is the problem?

• A.transform set
• B.peer identity
• C.preshared key
• D.ikev2 proposal

Comment: *

Name: *

Email: *

Verification: *

An engineer is troubleshooting a new DMVPN setup on a Cisco IOS router. After the show crypto isakmp sa command is issued, a response is returned of "MM_NO_STATE." Why does this failure occur?

• A.Tunnel protection is not applied to the DMVPN tunnel.
• B.The ISAKMP policy priority values are invalid.
• C.ESP traffic is being dropped.
• D.The Phase 1 policy does not match on both devices.

Comment: *

Name: *

Email: *

Verification: *

Which two types of SSO functionality are available on the Cisco ASA without any external SSO servers? (Choose two.)

• A.HTTP Basic
• B.Kerberos
• C.OAuth 2.0
• D.SAML
• E.NTLM

Comment: *

Name: *

Email: *

Verification: *